| 제목 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at admin/page-login.php |
|---|
| 설명 | A vulnerability classified as serious has been found in the Online Tours&Travels Management System. The vulnerability exists at the login.This will affect the file admin/page login.php. When you log in and perform the sql test on the email parameters, you find that the email parameters are directly spliced into the sql statement.Operation on parameter email results in sql injection. |
|---|
| 원천 | ⚠️ https://github.com/linmoren/online-tours-travels-management-system/blob/main/adminpage-login-email.md |
|---|
| 사용자 | muzishouchen (UID 36418) |
|---|
| 제출 | 2023. 01. 16. PM 02:51 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 01. 16. PM 03:34 (43 minutes later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 218426 [SourceCodester Online Tours & Travels Management System 1.0 admin/page-login.php email SQL 주입] |
|---|
| 포인트들 | 19 |
|---|